Lead Cyber Security Engineer

About the role

Mantel, an Australian technology consulting business covering Cloud, Digital, Data, Delivery and Security, is hiring a Lead Cyber Security Engineer. The role covers hands-on engineering delivery, resident engineer and advisory work with clients and partners, stakeholder management and pre-sales support. It delivers consulting services in cloud, DevSecOps and AI security, and acts as a bridge between the security engineering team and the wider Mantel capabilities.

Key responsibilities

• Translate client business requirements and strategies into robust, justifiable security solution definitions.
• Deliver large-scale cloud security projects driving Continuous Threat Exposure Management (CTEM) outcomes, using CNAPP and exposure management platforms such as Palo Alto Networks Cortex Cloud and Wiz.
• Design and deploy security controls including policy as code (OPA/Rego, Checkov).
• Secure developer pipelines (SAST, SCA, secrets and IaC scanning in CI/CD, findings routed to Jira or ServiceNow).
• Implement CSPM, CIEM and DSPM, and run-time security (EDR and CWPP) for cloud-native environments.
• Engineer CNAPP rollouts, migrate clients off legacy tooling and integrate CNAPP with stacks such as CrowdStrike, Qualys, ServiceNow, SIEM and CI/CD tools.
• Act as resident engineer: advise on platform use, run enablement sessions and hand over to operations teams.
• Review, design and implement secure solutions across AWS, Azure and Google Cloud.
• Support security partnerships with Palo Alto and Wiz, and support sales and pre-sales with solution design, effort estimates and SOW input.

Required profile

• Strong DevOps and cloud engineering foundation, including CI/CD pipelines, Terraform or similar IaC, and scripting in Python or Bash.
• Extensive hands-on experience with CNAPP platforms (Cortex preferred; Wiz or comparable also considered), plus SASE (Prisma Access preferred) and software firewall experience.
• Solid grounding in security fundamentals (CIA triad, least privilege, defence in depth, encryption, logging and monitoring) and cloud security basics on AWS and Azure.
• Strong knowledge of zero trust principles and architectures.
• Comfortable using AI coding assistants and agents, and willing to upskill and obtain new certifications.
• Experience mentoring junior consultants, leading junior consultants and providing technical security leadership in project teams.
• Comfortable working embedded in client and partner teams as a resident engineer, and experience in regulated environments.

Required skills

• CNAPP platforms: Cortex (preferred), Wiz or comparable
• SASE: Prisma Access (preferred); Zscaler or Netskope also relevant
• IaC: Terraform, GitHub Actions, GitLab CI or Azure DevOps
• Security tools: OPA/Rego, Checkov, SAST, SCA, IaC scanning, EDR, CWPP, SIEM integration
• Nice to have: Palo Alto or Wiz certifications, AWS/Azure/Google Cloud security certifications, CKS, Strata Cloud Manager, AI workload security (Prisma AIRS, AI-SPM)

What we offer

• New phone, laptop and swag.
• A tailored yearly plan (My Deal) with extra professional development, leave or side-hustle time.
• Family-inclusive workplace with flexible work, parental leave and family care support.
• Access to the Mantel AI Gateway and a dedicated monthly budget for AI tools.